Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/daHEI4pwK9MCoKlOIJSUBvhI06c.roa
File: daHEI4pwK9MCoKlOIJSUBvhI06c.roa (raw, json)
Hash identifier: /jr1EJCG0Q64uCvZ5hBO4FDYHAmlotvlgjK0tDnckkE=
Subject key identifier: 75:A1:C4:23:8A:70:2B:D3:02:A0:A9:4E:20:94:94:06:F8:48:D3:A7
Certificate issuer: /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial: 0194221FAA5FF8027AAD70F531BEE240DD1D
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/daHEI4pwK9MCoKlOIJSUBvhI06c.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39432
IP address blocks: 62.220.149.0/24 maxlen: 24
62.220.150.0/24 maxlen: 24
2001:789::/32 maxlen: 32
2001:789::/48 maxlen: 48
2001:78a::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:aa:5f:f8:02:7a:ad:70:f5:31:be:e2:40:dd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75a1c4238a702bd302a0a94e20949406f848d3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:8e:33:9b:55:b7:15:78:7f:14:92:61:38:
47:e9:54:5e:18:6b:6c:f0:5a:8b:50:b6:36:be:2c:
b1:bf:fc:37:69:20:65:cf:d3:56:98:6c:a7:39:c7:
0a:55:f2:4b:34:7e:3a:04:de:9a:3b:cf:f4:55:de:
26:1b:a1:6a:01:70:ef:02:62:f7:10:fa:06:c3:47:
fa:1c:cc:46:7b:a3:66:14:4d:37:56:a1:4e:7e:0a:
c7:cf:60:34:84:a0:8c:5a:3e:9a:a3:90:64:e6:a9:
e8:69:59:b0:11:96:d7:e3:25:31:d3:80:c5:b6:c3:
a9:5b:4a:96:9e:75:b6:53:54:b8:33:c6:d9:f2:93:
d3:7b:00:d2:70:30:f1:83:38:46:21:7a:19:e1:8e:
89:df:38:e4:52:3d:3a:61:fc:3f:49:9e:3b:96:b4:
28:10:f5:16:8f:90:51:b1:1e:a9:1e:e8:dc:d0:01:
79:cd:ac:ad:e8:99:45:3e:70:fe:27:45:ce:c4:76:
a9:c8:e5:22:08:74:92:c9:38:b7:be:e8:6b:44:4f:
80:bf:79:73:c4:04:bc:2e:a2:6e:22:9a:d2:c4:93:
50:ae:cb:0e:27:94:32:48:e0:f9:f2:b1:4d:23:0e:
b7:9d:5e:fe:3d:88:4a:69:78:b7:44:93:7f:ad:bf:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A1:C4:23:8A:70:2B:D3:02:A0:A9:4E:20:94:94:06:F8:48:D3:A7
X509v3 Authority Key Identifier:
keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/daHEI4pwK9MCoKlOIJSUBvhI06c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.149.0-62.220.150.255
IPv6:
2001:789::-2001:78a:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
10:17:0d:d2:1c:f3:ba:32:b8:4b:f3:49:f3:5b:16:01:bc:0a:
13:83:e9:a1:3f:64:11:d2:92:23:70:b6:5d:f1:20:38:15:ed:
df:7f:82:74:55:db:a6:58:e6:bb:61:88:01:47:83:0b:b2:84:
31:9c:07:62:a4:e4:b4:cf:5f:fc:8c:09:62:36:0e:c6:d5:d7:
cb:4e:38:bb:4a:10:65:aa:5f:41:ec:e9:8b:e6:ba:2c:d6:57:
74:02:5f:d0:db:69:f0:e3:7a:60:72:98:3c:19:15:49:59:2a:
18:dd:c5:d4:73:8f:aa:49:56:76:a8:0e:f5:54:43:32:d6:89:
32:8f:9f:19:aa:ff:a9:d7:61:9d:7a:fa:b2:48:77:fb:d5:64:
43:b0:60:30:52:5b:e3:ef:49:c6:57:d3:b2:55:3c:0d:d0:05:
ae:1e:7d:c4:ba:64:c7:e2:0e:4a:97:bb:c1:37:fe:d4:1b:54:
dd:3e:22:0b:1d:19:a4:02:fe:98:a8:7f:2e:35:1e:89:e5:db:
9a:e7:48:86:8a:9d:2b:fc:92:1c:4e:2e:d2:ae:8a:86:cd:cd:
a7:e4:c8:b4:66:6d:60:e2:35:f6:1d:85:a6:14:57:d0:2d:b2:
ef:ef:7b:a5:a0:c1:ba:e3:8c:c8:67:47:5b:f6:fe:16:d8:83:
8a:8e:4d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:53:33 2025 by rpki-client